PatchTheCVEneomail vulnerabilities and fixes
Recent CVEs affecting neomail, with upgrade or downgrade steps. 3 tracked.
neomail has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-05-02. Highest priority: CVE-2006-2138 (score 40/100).
- CVE-2006-2138 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbit
- CVE-2006-0711 MEDIUM 5.0 UPGRADE The (1) addfolder and (2) deletefolder functions in neomail-prefs.pl in NeoMail 1.28 do not validate the Sessi
- CVE-2006-0536 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.27 allows remote attackers to inject arbit
FAQ
How do I fix neomail vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is neomail being exploited right now?
None of the tracked neomail CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which neomail CVE should I patch first?
CVE-2006-2138 currently ranks highest (40/100): Cross-site scripting (XSS) vulnerability in neomail.pl in NeoMail 1.29 allows remote attackers to inject arbit.